bulletin-deploy 0.7.22 → 0.7.23-rc.2

package/assets/environments.json

@@ -56,6 +56,13 @@
       "autoAccountMapping": true,
       "bulletinAuthorizeV2": true,
       "nativeToEthRatio": 100000000,
+      "popSelfServe": {
+        "sudoEnvLabel": "Next V2",
+        "faucetUrl": "https://faucet.polkadot.io/?parachain=1500",
+        "personhoodFaucetUrl": "https://sudo.personhood.dev/personhood-faucet",
+        "dotnsBootstrapUrl": "https://sudo.personhood.dev/dotns-bootstrap",
+        "stateAwareGuidance": true
+      },
       "contracts": {
         "DOTNS_PROTOCOL_REGISTRY": "0x5Caef84563fc980178e28417414aa65bA32f6B4e",
         "DOTNS_REGISTRAR": "0x885b8085bA92A31c4ef52076f77379E647ECC399",

package/dist/bug-report.js

@@ -9,10 +9,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-LMCKLAA5.js";
-import "./chunk-V7KIUORT.js";
-import "./chunk-PNZCJPI6.js";
-import "./chunk-VQPLU5FL.js";
+} from "./chunk-3T3AWNCO.js";
+import "./chunk-2C424N5I.js";
+import "./chunk-3PUOXYBI.js";
+import "./chunk-SAMFZEX3.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/{chunk-V7KIUORT.js → chunk-2C424N5I.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-PNZCJPI6.js";
+} from "./chunk-3PUOXYBI.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-PNZCJPI6.js → chunk-3PUOXYBI.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-VQPLU5FL.js";
+} from "./chunk-SAMFZEX3.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";
@@ -212,7 +212,14 @@ function getDeployAttributes(domain) {
     "deploy.dotns.signer_below_floor": "false",
     "deploy.dotns.toppedup": "false",
     // Flipped to "true" by deploy() when options.automatedMirror is set.
-    "deploy.automated_mirror": "false"
+    "deploy.automated_mirror": "false",
+    // Seeded "false" so every span carries the attribute for ratio queries.
+    // Flipped by deploy.ts storage phase when content is encrypted.
+    "deploy.encrypted": "false",
+    // Flipped by deploy.ts after parseDomainName resolves isSubdomain.
+    "deploy.subdomain": "false",
+    // Flipped by deploy.ts after readPreviousContenthashSafe when a prior CID is found.
+    "deploy.incremental": "false"
   };
   if (hostApp) attrs["deploy.host_app"] = hostApp;
   const hostAppVersion = process.env.BULLETIN_DEPLOY_HOST_APP_VERSION;

package/dist/{chunk-LMCKLAA5.js → chunk-3T3AWNCO.js}

@@ -2,11 +2,11 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-V7KIUORT.js";
+} from "./chunk-2C424N5I.js";
 import {
   VERSION,
   getCurrentSentryTraceId
-} from "./chunk-PNZCJPI6.js";
+} from "./chunk-3PUOXYBI.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-F36C363Y.js → chunk-5JHQZDWQ.js}

@@ -65,6 +65,13 @@ var environments_default = {
       autoAccountMapping: true,
       bulletinAuthorizeV2: true,
       nativeToEthRatio: 1e8,
+      popSelfServe: {
+        sudoEnvLabel: "Next V2",
+        faucetUrl: "https://faucet.polkadot.io/?parachain=1500",
+        personhoodFaucetUrl: "https://sudo.personhood.dev/personhood-faucet",
+        dotnsBootstrapUrl: "https://sudo.personhood.dev/dotns-bootstrap",
+        stateAwareGuidance: true
+      },
       contracts: {
         DOTNS_PROTOCOL_REGISTRY: "0x5Caef84563fc980178e28417414aa65bA32f6B4e",
         DOTNS_REGISTRAR: "0x885b8085bA92A31c4ef52076f77379E647ECC399",
@@ -319,7 +326,14 @@ var HARDCODED_FALLBACK = {
       id: "paseo-next-v2",
       name: "Paseo Next v2",
       network: "testnet",
-      description: "Next iteration of the Paseo Next testnet (hardcoded fallback)"
+      description: "Next iteration of the Paseo Next testnet (hardcoded fallback)",
+      popSelfServe: {
+        sudoEnvLabel: "Next V2",
+        faucetUrl: "https://faucet.polkadot.io/?parachain=1500",
+        personhoodFaucetUrl: "https://sudo.personhood.dev/personhood-faucet",
+        dotnsBootstrapUrl: "https://sudo.personhood.dev/dotns-bootstrap",
+        stateAwareGuidance: true
+      }
     }
   ],
   chains: [
@@ -444,6 +458,9 @@ function resolveEndpoints(doc, envId) {
     nativeToEthRatio: BigInt(env.nativeToEthRatio ?? 1e6)
   };
 }
+function getPopSelfServeConfig(doc, envId) {
+  return doc.environments.find((e) => e.id === envId)?.popSelfServe ?? null;
+}
 function listEnvironments(doc) {
   const bulletinChain = doc.chains.find((c) => c.id === "bulletin");
   return doc.environments.map((env) => {
@@ -480,6 +497,7 @@ export {
   defaultBundledPath,
   loadEnvironments,
   resolveEndpoints,
+  getPopSelfServeConfig,
   listEnvironments,
   formatEnvironmentTable
 };

package/dist/{chunk-6ZVGLZMF.js → chunk-B6TOE4GB.js}

@@ -4,8 +4,10 @@ import {
 import {
   captureWarning,
   setDeployAttribute,
+  setDeploySentryTag,
+  truncateAddress,
   withSpan
-} from "./chunk-PNZCJPI6.js";
+} from "./chunk-3PUOXYBI.js";
 
 // src/dotns.ts
 import crypto from "crypto";
@@ -35,11 +37,20 @@ var FEE_FLOOR_OWNED = ONE_PAS / 100n;
 var FEE_FLOOR_REGISTER = ONE_PAS / 10n;
 var TOP_UP_TARGET = ONE_PAS / 2n;
 var SOURCE_BUFFER = ONE_PAS;
+var REPROVE_FEE_ESTIMATE = ONE_PAS / 100n;
+var REPROVE_FEE_SAFETY_MARGIN_PCT = 110n;
 var TOP_UP_TRANSFER_TIMEOUT_MS = 6e4;
 var PASEO_FAUCET_URL = "https://faucet.polkadot.io";
 function fmtPas(plancks) {
   return (Number(plancks) / Number(ONE_PAS)).toFixed(4);
 }
+function resolveNativeTokenSymbol(envId) {
+  if (!envId) return "PAS";
+  if (envId.includes("paseo")) return "PAS";
+  if (envId.includes("westend")) return "WND";
+  if (envId.includes("rococo")) return "ROC";
+  return "PAS";
+}
 function feeFloorFor(plannedAction) {
   return plannedAction === "already-owned-by-us" ? FEE_FLOOR_OWNED : FEE_FLOOR_REGISTER;
 }
@@ -258,12 +269,12 @@ function formatContractDryRunFailure(gasEstimate, context) {
   const isBareRevert = (revertData === void 0 || revertData.trim() === "0x") && gasEstimate.revertFlags === 1n;
   if (isBareRevert && BARE_REVERT_DIAGNOSTIC_FUNCTIONS.has(functionName)) {
     lines.push(
-      `  diagnostic: bare-revert (empty 0x). Most common causes:`,
-      `    1. Origin not actually mapped on-chain. Try BULLETIN_DEPLOY_DEBUG_DOTNS_TX=1 to log calldata, then run`,
-      `       \`node tools/dotns-dry-run.mjs <label>\` against the env's Asset Hub RPC to reproduce in isolation.`,
-      `    2. Contract precondition (e.g. commitment too new). dotns-dry-run.mjs will surface the contract-side state.`,
-      `  hint: prepend --fresh to dotns-dry-run.mjs to use a brand-new unmapped substrate origin \u2014`,
-      `        if the revert ONLY reproduces with --fresh, it's the account-mapping bug.`
+      `  diagnostic: bare-revert (empty 0x). Account mapping was verified at connect time, so the cause is likely:`,
+      `    1. PoP status changed between preflight and registration (race condition).`,
+      `    2. Commitment timing: the revealed commitment is still too new or already expired.`,
+      `    3. Label was registered by someone else between preflight and register.`,
+      `  To reproduce in isolation: \`node tools/dotns-dry-run.mjs <label>\``,
+      `  To rule out a mapping issue: add --fresh (a brand-new unmapped origin) \u2014 if --fresh reverts but the mapped one doesn't, it's a mapping bug.`
     );
   }
   return lines.join("\n");
@@ -636,21 +647,45 @@ var ReviveClientWrapper = class _ReviveClientWrapper {
   }
 };
 var DOTNS_CONTEXT_HEX_LOWER = "0x646f746e73000000000000000000000000000000000000000000000000000000";
-function formatPersonhoodRemediation(state, environmentId) {
-  if (environmentId !== "paseo-next-v2") {
+function formatPersonhoodRemediation(state, popSelfServe, environmentId) {
+  if (!popSelfServe?.stateAwareGuidance) {
     return "Self-attestation is no longer available. Contact the DotNS team for whitelisting / Personhood status help.";
   }
   switch (state.state) {
     case "not-bound":
-      return "Your account has no DotNS alias binding on paseo-next-v2. Visit https://sudo.personhood.dev/dotns-bootstrap to complete the recognition and binding steps, or run `tools/personhood-bootstrap.mjs --mnemonic <your-mnemonic>` once Stage 2 of the bootstrap tooling lands.";
+      return `Your account has no DotNS alias binding on ${environmentId ?? "this environment"}. Visit ${popSelfServe.dotnsBootstrapUrl} to complete the recognition and binding steps, or run \`tools/personhood-bootstrap.mjs --mnemonic <your-mnemonic>\` once Stage 2 of the bootstrap tooling lands.`;
     case "bound-likely-stale":
-      return "Your alias binding exists but may have a stale ring revision. Run `node tools/reprove-alias.mjs --mnemonic <your-mnemonic> --env paseo-next-v2` to refresh the proof, then retry the registration.";
+      return `Your alias binding exists but may have a stale ring revision. Run \`node tools/reprove-alias.mjs --mnemonic <your-mnemonic> --env ${environmentId ?? "this environment"}\` to refresh the proof, then retry the registration.`;
     case "wrong-context":
-      return "Your alias binding exists but is for a different application context" + (state.storedContextHex ? ` (context: ${state.storedContextHex})` : "") + ". Re-bind under the 'dotns' context using the bootstrap flow: https://sudo.personhood.dev/dotns-bootstrap";
+      return "Your alias binding exists but is for a different application context" + (state.storedContextHex ? ` (context: ${state.storedContextHex})` : "") + ". Re-bind under the 'dotns' context using the bootstrap flow: " + popSelfServe.dotnsBootstrapUrl;
     case "bound-fresh":
       return "Self-attestation is no longer available. Contact the DotNS team for whitelisting / Personhood status help.";
   }
 }
+function formatPopShortfallReason(opts) {
+  const { label, requiredName, currentName, isTestnet, environmentId, popSelfServe, aliasState, exampleNoStatusLabel: noStatusEx } = opts;
+  const leadIn = `${label}.dot requires ${requiredName}, but this signer is ${currentName}.`;
+  let testnetBlock = "";
+  if (isTestnet && popSelfServe != null) {
+    if (popSelfServe.stateAwareGuidance) {
+      const state = aliasState ?? { state: "not-bound" };
+      testnetBlock = "\n\n" + formatPersonhoodRemediation(state, popSelfServe, environmentId);
+    } else {
+      testnetBlock = `
+
+On testnets you can self-serve:
+  1. Fund the service account mnemonic via ${popSelfServe.faucetUrl}
+  2. Go to ${popSelfServe.personhoodFaucetUrl}, pick your env (e.g. ${popSelfServe.sudoEnvLabel}), and paste the mnemonic
+  3. Go to ${popSelfServe.dotnsBootstrapUrl} and follow each step (first and last can probably be skipped)`;
+    }
+  }
+  const alternativesBlock = `
+
+Alternatively:
+  - Use a NoStatus-compatible label (base length >= 9 with exactly two trailing digits, e.g. ${noStatusEx})
+  - Raise a whitelist issue at https://github.com/paritytech/dotns/`;
+  return leadIn + testnetBlock + alternativesBlock;
+}
 var DotNS = class {
   client;
   clientWrapper;
@@ -664,9 +699,24 @@ var DotNS = class {
   // back to the legacy paseo-only RPC_ENDPOINTS for direct library callers.
   assetHubEndpoints;
   _usesExternalSigner = false;
+  _localMnemonic = null;
   _contracts = CONTRACTS;
   _nativeToEthRatio = NATIVE_TO_ETH_RATIO;
   _environmentId = null;
+  _popSelfServe = null;
+  // Test-only seam: consumed once by classifyAliasAccountState() then cleared.
+  // Mirrors the __setDeployRootSpanForTest / __setSentryForTest pattern.
+  _classifyOverrideForTest = null;
+  /** Test-only: inject a fixed classifyAliasAccountState return value for the next call. Consumed once. */
+  __setClassifyOverrideForTest(state) {
+    this._classifyOverrideForTest = { state, revision: 0 };
+  }
+  // Test-only seam: consumed once by getUserPopStatus() then cleared.
+  _userPopStatusOverrideForTest = null;
+  /** Test-only: inject a fixed getUserPopStatus return value for the next call. Consumed once. */
+  __setUserPopStatusForTest(status) {
+    this._userPopStatusOverrideForTest = status;
+  }
   constructor() {
     this.client = null;
     this.clientWrapper = null;
@@ -687,6 +737,9 @@ var DotNS = class {
     if (options.environmentId) {
       this._environmentId = options.environmentId;
     }
+    if (options.popSelfServe !== void 0) {
+      this._popSelfServe = options.popSelfServe ?? null;
+    }
     const rpc = options.rpc || process.env.DOTNS_RPC || this.assetHubEndpoints[0];
     this.rpc = rpc;
     this._usesExternalSigner = Boolean(options.signer && options.signerAddress);
@@ -698,6 +751,9 @@ var DotNS = class {
       const keyUriArg = options.keyUri || process.env.DOTNS_KEY_URI;
       let source = keyUriArg || mnemonicArg || DEFAULT_MNEMONIC;
       const isKeyUri = Boolean(keyUriArg);
+      if (!isKeyUri && !options.derivationPath) {
+        this._localMnemonic = mnemonicArg || DEFAULT_MNEMONIC;
+      }
       if (options.derivationPath && !isKeyUri && source) {
         source = `${source}${options.derivationPath}`;
       }
@@ -708,28 +764,34 @@ var DotNS = class {
       this.substrateAddress = account.address;
     }
     console.log(`   SS58 Address: ${this.substrateAddress}`);
-    try {
-      this.client = createClient(getWsProvider(rpc, { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS }));
-      const unsafeApi = this.client.getUnsafeApi();
-      this.clientWrapper = new ReviveClientWrapper(unsafeApi);
-      this.evmAddress = await withTimeout(
-        this.clientWrapper.getEvmAddress(this.substrateAddress),
-        CONNECTION_TIMEOUT_MS,
-        "ReviveApi.address"
-      );
-      console.log(`   H160 Address: ${this.evmAddress}`);
-    } catch (e) {
-      throw new Error(`DotNS connect: failed to resolve EVM address from ${this.substrateAddress} via ReviveApi.address (${e.message?.slice(0, 200)})`);
-    }
-    this.connected = true;
-    if (options.nativeToEthRatio) this._nativeToEthRatio = options.nativeToEthRatio;
-    try {
-      await this.ensureMappedAccountReady(options.autoAccountMapping ?? false);
-    } catch (e) {
-      this.connected = false;
-      throw e;
-    }
-    return this;
+    setDeployAttribute("deploy.dotns.signer", truncateAddress(this.substrateAddress));
+    setDeploySentryTag("deploy.dotns.signer", truncateAddress(this.substrateAddress));
+    return withSpan("deploy.dotns.connect", "dotns connect", {}, async () => {
+      try {
+        this.client = createClient(getWsProvider(rpc, { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS }));
+        const unsafeApi = this.client.getUnsafeApi();
+        this.clientWrapper = new ReviveClientWrapper(unsafeApi);
+        this.evmAddress = await withTimeout(
+          this.clientWrapper.getEvmAddress(this.substrateAddress),
+          CONNECTION_TIMEOUT_MS,
+          "ReviveApi.address"
+        );
+        console.log(`   H160 Address: ${this.evmAddress}`);
+      } catch (e) {
+        throw new Error(`DotNS connect: failed to resolve EVM address from ${this.substrateAddress} via ReviveApi.address (${e.message?.slice(0, 200)})`);
+      }
+      setDeployAttribute("deploy.dotns.rpc_used", rpc);
+      setDeployAttribute("deploy.dotns.evm_address", this.evmAddress);
+      this.connected = true;
+      if (options.nativeToEthRatio) this._nativeToEthRatio = options.nativeToEthRatio;
+      try {
+        await this.ensureMappedAccountReady(options.autoAccountMapping ?? false);
+      } catch (e) {
+        this.connected = false;
+        throw e;
+      }
+      return this;
+    });
   }
   async ensureMappedAccountReady(autoAccountMapping = false) {
     this.ensureConnected();
@@ -737,10 +799,12 @@ var DotNS = class {
       throw new Error("Account mapping unavailable before DotNS signer is initialized");
     }
     if (autoAccountMapping) {
+      setDeployAttribute("deploy.dotns.mapping_source", "auto-account-mapping");
       await this.ensureAutoMappedAccountReady();
       return;
     }
     if (await this.clientWrapper.checkIfAccountMapped(this.substrateAddress)) {
+      setDeployAttribute("deploy.dotns.mapping_source", "already-mapped");
       console.log(`   Account: mapped`);
       return;
     }
@@ -749,6 +813,7 @@ var DotNS = class {
       await this.clientWrapper.ensureAccountMapped(this.substrateAddress, this.signer);
     } catch (e) {
       if (await this.clientWrapper.checkIfAccountMapped(this.substrateAddress)) {
+        setDeployAttribute("deploy.dotns.mapping_source", "direct-mapped");
         console.log(`   Account: mapped`);
         return;
       }
@@ -756,9 +821,11 @@ var DotNS = class {
         signer: this.substrateAddress,
         error: e?.message?.slice?.(0, 200) ?? String(e).slice(0, 200)
       });
+      setDeployAttribute("deploy.dotns.mapping_source", "auto-map-fallback");
       await this.ensureAutoMappedAccountReady();
       return;
     }
+    setDeployAttribute("deploy.dotns.mapping_source", "direct-mapped");
     console.log(`   Account: mapped`);
   }
   async ensureAutoMappedAccountReady() {
@@ -841,6 +908,11 @@ var DotNS = class {
    * Returns "not-bound" if the chain is unreachable (safe fallback to generic advice).
    */
   async classifyAliasAccountState(ss58) {
+    if (this._classifyOverrideForTest !== null) {
+      const result = this._classifyOverrideForTest;
+      this._classifyOverrideForTest = null;
+      return result;
+    }
     if (!this.clientWrapper) return { state: "not-bound" };
     try {
       const api = this.clientWrapper.client;
@@ -1034,6 +1106,11 @@ var DotNS = class {
     }
   }
   async getUserPopStatus(ownerAddress = null) {
+    if (this._userPopStatusOverrideForTest !== null) {
+      const result = this._userPopStatusOverrideForTest;
+      this._userPopStatusOverrideForTest = null;
+      return result;
+    }
     this.ensureConnected();
     const checkAddress = ownerAddress || this.evmAddress;
     try {
@@ -1264,7 +1341,12 @@ var DotNS = class {
       }
     }
     const priceMeta = await withTimeout(this.contractCall(this._contracts.POP_RULES, POP_RULES_ABI, "priceWithCheck", [label, this.evmAddress]), 3e4, "priceWithCheck");
-    const priceRaw = priceMeta.price ?? (Array.isArray(priceMeta) ? priceMeta[0] : 0n);
+    const priceRaw = priceMeta?.price;
+    if (priceRaw == null) {
+      throw new Error(
+        `priceWithCheck returned unexpected shape (expected object with .price): ` + JSON.stringify(priceMeta, (_, v) => typeof v === "bigint" ? v.toString() : v)
+      );
+    }
     const priceWei = typeof priceRaw === "bigint" ? priceRaw : BigInt(priceRaw);
     console.log(`   Required status: ${popStatusName(requiredStatus)}`);
     console.log(`   User status: ${popStatusName(userStatus)}`);
@@ -1277,6 +1359,12 @@ var DotNS = class {
    Finalizing registration for ${registration.label}.dot...`);
     const bufferedPaymentWei = priceWei * 110n / 100n;
     const bufferedPaymentNative = bufferedPaymentWei / this._nativeToEthRatio;
+    if (priceWei > 0n && bufferedPaymentNative === 0n) {
+      throw new Error(
+        `Payment conversion underflow: priceWei=${priceWei} rounds to 0 native units (nativeToEthRatio=${this._nativeToEthRatio}). Cannot call register with zero payment.`
+      );
+    }
+    setDeployAttribute("deploy.payment_wei", priceWei.toString());
     console.log(`   Oracle price: ${formatEther(priceWei)} PAS`);
     console.log(`   Paying: ${formatEther(bufferedPaymentWei)} PAS`);
     const txHash = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, bufferedPaymentNative, DOTNS_REGISTRAR_CONTROLLER_ABI, "register", [registration], (s) => console.log(`      ${s}`));
@@ -1299,7 +1387,11 @@ var DotNS = class {
   // `register(label)` will succeed, so the caller can fail-fast BEFORE the
   // Bulletin chunk upload. Never writes to chain. See issue #100.
   async preflight(label) {
+    return this._preflightInternal(label, false);
+  }
+  async _preflightInternal(label, reproveAttempted) {
     return withSpan("deploy.dotns.preflight", `preflight ${label}.dot`, {}, async () => {
+      setDeployAttribute("deploy.dotns.reprove.auto", "false");
       this.ensureConnected();
       const validated = validateDomainLabel(label);
       const trailingDigits = countTrailingDigits(validated);
@@ -1414,9 +1506,59 @@ var DotNS = class {
             signerFreeBalance
           };
         }
-        if (userStatus === ProofOfPersonhoodStatus.NoStatus && isTestnet && this._environmentId === "paseo-next-v2" && this.substrateAddress) {
+        if (userStatus === ProofOfPersonhoodStatus.NoStatus && isTestnet && this._popSelfServe?.stateAwareGuidance === true && this.substrateAddress) {
           const aliasState = await this.classifyAliasAccountState(this.substrateAddress);
-          const remediationMessage = formatPersonhoodRemediation(aliasState, this._environmentId);
+          if (aliasState.state === "bound-likely-stale" && !this._usesExternalSigner && this._localMnemonic && !reproveAttempted) {
+            const minBalance = REPROVE_FEE_ESTIMATE * REPROVE_FEE_SAFETY_MARGIN_PCT / 100n;
+            const symbol = resolveNativeTokenSymbol(this._environmentId);
+            if (signerFreeBalance < minBalance) {
+              setDeployAttribute("deploy.dotns.reprove.auto", "true");
+              setDeployAttribute("deploy.dotns.reprove.outcome", "insufficient_funds");
+              return {
+                label: validated,
+                classification,
+                userStatus,
+                trailingDigits,
+                baselength,
+                isAvailable: true,
+                existingOwner: null,
+                isBaseNameReserved: isReserved,
+                reservationOwner,
+                isTestnet,
+                canProceed: false,
+                reason: `Cannot auto-refresh: signer balance ${fmtPas(signerFreeBalance)} ${symbol} < estimated fee ${fmtPas(REPROVE_FEE_ESTIMATE)} ${symbol}. Top up via the testnet faucet or run \`tools/reprove-alias.mjs --mnemonic <your-mnemonic> --env ${this._environmentId}\` manually.`,
+                plannedAction: "abort",
+                needsPopUpgrade: false,
+                targetPopStatus,
+                signerFreeBalance
+              };
+            }
+            console.log(`
+[stage] Personhood preflight \u2014 auto-refresh`);
+            console.log(`   Alias binding exists but ring revision is stale (stored=${aliasState.revision ?? "unknown"}).`);
+            console.log(`   Refreshing automatically on testnet\u2026`);
+            console.log(`   Estimated reprove fee: ${fmtPas(REPROVE_FEE_ESTIMATE)} ${symbol}. Signer balance: ${fmtPas(signerFreeBalance)} ${symbol} \u2014 proceeding.`);
+            setDeployAttribute("deploy.dotns.reprove.auto", "true");
+            let reproveSucceeded = false;
+            try {
+              console.log(`   Submitting reprove_alias_account\u2026`);
+              const reproveResult = await this.reprove(this._localMnemonic);
+              console.log(`   Refresh complete (old_revision=${reproveResult.oldRevision}, new_revision=${reproveResult.newRevision}, block=${reproveResult.blockHash}).`);
+              setDeployAttribute("deploy.dotns.reprove.outcome", "success");
+              setDeployAttribute("deploy.dotns.reprove.old_revision", String(reproveResult.oldRevision));
+              setDeployAttribute("deploy.dotns.reprove.new_revision", String(reproveResult.newRevision));
+              reproveSucceeded = true;
+            } catch (e) {
+              const msg = e?.message ?? String(e);
+              console.log(`   Auto-reprove failed: ${msg}`);
+              setDeployAttribute("deploy.dotns.reprove.outcome", "failed_submission");
+            }
+            if (reproveSucceeded) {
+              console.log(`   Continuing with registration of ${validated}.dot.`);
+              return this._preflightInternal(label, true);
+            }
+          }
+          const remediationMessage = formatPersonhoodRemediation(aliasState, this._popSelfServe, this._environmentId);
           const currentName2 = popStatusName(userStatus);
           const requiredName2 = popStatusName(classification.status);
           return {
@@ -1452,7 +1594,16 @@ var DotNS = class {
           reservationOwner,
           isTestnet,
           canProceed: false,
-          reason: `${validated}.dot requires ${requiredName}, but this signer is ${currentName}. Self-attestation is no longer available. Choose a NoStatus-compatible name (base length >= 9 with exactly two trailing digits, for example ${exampleNoStatusLabel(validated)}) or contact the DotNS team for whitelisting / Personhood status.`,
+          reason: formatPopShortfallReason({
+            label: validated,
+            requiredName,
+            currentName,
+            isTestnet,
+            environmentId: this._environmentId,
+            popSelfServe: this._popSelfServe,
+            aliasState: null,
+            exampleNoStatusLabel: exampleNoStatusLabel(validated)
+          }),
           plannedAction: "abort",
           needsPopUpgrade: false,
           targetPopStatus,
@@ -1533,6 +1684,8 @@ var DotNS = class {
       if (preRequiredStatus === ProofOfPersonhoodStatus.Reserved) {
         throw new Error(preClassification.message);
       }
+      const isTestnet = await this.isTestnet();
+      const registerAliasState = isTestnet && this._popSelfServe?.stateAwareGuidance === true && this.substrateAddress ? await this.classifyAliasAccountState(this.substrateAddress) : null;
       const rejectIneligible = (statusRequired, userStatus2) => {
         if (statusRequired === ProofOfPersonhoodStatus.NoStatus && userStatus2 === ProofOfPersonhoodStatus.ProofOfPersonhoodLite) {
           throw new Error(
@@ -1540,7 +1693,16 @@ var DotNS = class {
           );
         }
         throw new Error(
-          `${label}.dot requires ${popStatusName(statusRequired)}, but this signer is ${popStatusName(userStatus2)}. Self-attestation is no longer available. Choose a NoStatus-compatible name (base length >= 9 with exactly two trailing digits, for example ${exampleNoStatusLabel(label)}) or contact the DotNS team for whitelisting / Personhood status.`
+          formatPopShortfallReason({
+            label,
+            requiredName: popStatusName(statusRequired),
+            currentName: popStatusName(userStatus2),
+            isTestnet,
+            environmentId: this._environmentId,
+            popSelfServe: this._popSelfServe,
+            aliasState: registerAliasState,
+            exampleNoStatusLabel: exampleNoStatusLabel(label)
+          })
         );
       };
       const reverse = options.reverse ?? (process.env.DOTNS_REVERSE ?? "false").toLowerCase() === "true";
@@ -1666,6 +1828,7 @@ export {
   parseProofOfPersonhoodStatus,
   popStatusName,
   formatPersonhoodRemediation,
+  formatPopShortfallReason,
   DotNS,
   dotns
 };

package/dist/{chunk-VQPLU5FL.js → chunk-SAMFZEX3.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.7.22",
+  version: "0.7.23-rc.2",
   private: false,
   repository: {
     type: "git",
@@ -27,6 +27,14 @@ var package_default = {
     ".": {
       types: "./dist/index.d.ts",
       import: "./dist/index.js"
+    },
+    "./deploy": {
+      types: "./dist/deploy.d.ts",
+      import: "./dist/deploy.js"
+    },
+    "./manifest-roundtrip": {
+      types: "./dist/manifest-roundtrip.d.ts",
+      import: "./dist/manifest-roundtrip.js"
     }
   },
   files: [

package/dist/{chunk-5C4E4EMD.js → chunk-VHHUJLP4.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-PNZCJPI6.js";
+} from "./chunk-3PUOXYBI.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";